CVE record · 3 sources
CVE-2026-110163
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
- Vendor
- Product
- chrome, chromium
- EPSS
- 0.003 (p25)
- Exposure class
- Browser, Operating system
Coverage
5Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Chromium CVE-2026-110163: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
-
Long Term Support Channel Update for ChromeOS
A new LTS-150 version 150.0.7871.287 (Platform Version: 16700.68.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 562038679 High CVE-2026-103629 Integer overflow in Skia…
-
Stable Channel Update for Desktop
The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes…
-
Extended Stable Update for Desktop
The Extended Stable channel has been updated to 152.0.7977.167 for Windows and Mac which will roll out over the coming days/weeks. Security Fixes Note: Access to bug details and links may be kept restricted until a majority of…
-
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)